Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/5KGYE9piwFKttOyGnrTUu-bgoQc.roa
File: 5KGYE9piwFKttOyGnrTUu-bgoQc.roa (raw, json)
Hash identifier: JrEgWVwbDU/E/mi2fHo5eVT+MHVvmBRTZiVlsYv3PUo=
Subject key identifier: E4:A1:98:13:DA:62:C0:52:AD:B4:EC:86:9E:B4:D4:BB:E6:E0:A1:07
Certificate issuer: /CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Certificate serial: 0184E7D27873EACEC4180A459E84A4C30F18
Authority key identifier: EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/5KGYE9piwFKttOyGnrTUu-bgoQc.roa
Signing time: Tue 06 Dec 2022 14:24:01 +0000
ROA not before: Tue 06 Dec 2022 14:24:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28907
IP address blocks: 193.178.144.0/22 maxlen: 24
193.178.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:d2:78:73:ea:ce:c4:18:0a:45:9e:84:a4:c3:0f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Validity
Not Before: Dec 6 14:24:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4a19813da62c052adb4ec869eb4d4bbe6e0a107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:e2:54:7c:19:0e:8a:3e:94:b5:d9:c1:ef:
f0:ea:ff:ec:df:10:41:d0:29:46:9d:b7:05:97:3a:
8f:2a:ca:5b:56:76:0c:44:c8:82:6c:74:58:ee:18:
92:8d:07:a6:e5:b5:7c:01:83:c1:17:04:96:7e:ad:
df:2c:00:ba:16:7a:ac:bc:ee:06:21:29:b7:43:5f:
e1:f3:d0:32:d1:39:6d:9a:7c:a4:b8:8a:fa:9f:52:
13:f4:01:ee:d8:30:90:92:0f:3f:fd:35:60:62:e9:
6b:77:39:94:ff:7f:fc:f8:8a:36:09:91:0d:5c:82:
b2:cc:24:cd:4b:a7:51:d9:ff:a1:ae:c7:f9:e8:cb:
07:1b:a3:95:0f:30:71:a4:30:f4:0a:8b:d0:b3:ff:
b6:61:42:ed:f7:02:1b:5e:fe:84:f5:70:a7:9f:d6:
73:f2:a5:77:2a:5e:c7:63:1e:c7:8e:bf:11:a3:28:
92:67:37:0b:74:4d:9f:c9:4f:e1:c9:60:c2:2c:cb:
f7:e7:f0:ee:cc:cb:5e:ca:57:d4:69:32:51:21:4b:
49:44:74:2a:ac:5d:f8:b1:87:ed:4a:39:47:4b:56:
bc:ba:4e:6f:0b:9f:55:79:85:d9:21:39:5d:68:2c:
da:ac:e5:11:df:a3:dc:50:e3:7f:3c:4f:b6:d5:ac:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A1:98:13:DA:62:C0:52:AD:B4:EC:86:9E:B4:D4:BB:E6:E0:A1:07
X509v3 Authority Key Identifier:
keyid:EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/5KGYE9piwFKttOyGnrTUu-bgoQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/69b8UVjuPsIaQh1xgjTI2KM2H6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.144.0/22
Signature Algorithm: sha256WithRSAEncryption
72:cd:51:3e:e2:9b:d3:85:86:90:e7:1d:19:d7:d1:88:7e:8c:
85:2c:72:d1:4d:fa:2a:45:b8:1e:46:bb:c3:78:68:a2:35:1e:
43:8b:22:e0:b1:86:02:7a:a1:b0:05:9d:3d:c9:20:aa:64:cc:
9a:12:0d:bc:75:65:33:45:a0:c6:7a:22:b1:55:32:0e:09:ca:
7f:e7:68:eb:15:dd:29:81:c9:d8:4a:bc:cb:c4:4b:55:42:8b:
e3:03:2f:52:42:53:ce:9c:c3:2b:3c:1b:77:81:43:39:5d:4a:
7f:a5:8f:5e:fd:ad:14:0b:8f:7c:77:bb:59:cd:ab:61:32:c6:
32:c3:ed:45:03:0c:8f:f4:92:6a:ae:f7:eb:a6:f4:fe:f2:a1:
e4:d0:d1:18:52:e7:18:2e:34:d0:11:4e:04:de:d9:9b:0a:00:
50:bf:01:3b:54:e9:1f:fc:e0:4c:fc:c3:b3:de:3e:6b:34:cd:
5e:c4:e3:f3:28:d5:8a:e5:2d:98:95:92:6a:8e:fa:11:22:43:
fc:09:93:b1:e1:a1:2b:55:13:3f:13:b3:4a:ae:65:59:1e:e6:
d6:80:5d:c4:82:be:d1:1d:13:67:bb:a0:29:c5:d8:71:e6:e1:
f3:28:32:3b:81:05:4e:2b:4b:4b:d3:1c:1f:3b:7f:7a:3c:ef:
75:17:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:55 2025 by rpki-client